Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa
File:                     323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (raw, json)
Hash identifier:          zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=
Subject key identifier:   F3:51:BE:B8:46:D5:ED:14:B6:06:A8:57:4D:60:9D:76:43:11:A8:C5
Certificate issuer:       /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial:       7F4D08F746157F53E764DA10193F3B9DB2270974
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa
Signing time:             Wed 26 Feb 2025 20:15:00 +0000
ROA not before:           Wed 26 Feb 2025 20:10:00 +0000
ROA not after:            Wed 25 Feb 2026 20:15:00 +0000
asID:                     273167
IP address blocks:        2803:d250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 17:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4d:08:f7:46:15:7f:53:e7:64:da:10:19:3f:3b:9d:b2:27:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
        Validity
            Not Before: Feb 26 20:10:00 2025 GMT
            Not After : Feb 25 20:15:00 2026 GMT
        Subject: CN=F351BEB846D5ED14B606A8574D609D764311A8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:f1:da:86:fe:c9:64:60:2b:90:4e:27:25:
                    fa:44:2d:ac:0a:17:11:37:46:f2:6e:9a:b3:6a:97:
                    69:5d:17:18:1b:9d:d0:b3:06:98:fd:8d:da:71:b8:
                    80:c4:61:58:7e:23:e4:8f:33:c0:53:4d:55:7f:e1:
                    c1:3c:94:7a:97:4d:89:ff:b2:2b:91:54:52:86:35:
                    8b:64:b1:42:4e:1b:3b:5f:bb:8b:5b:19:71:e8:67:
                    17:65:b8:76:7b:b6:20:ba:57:0e:c5:87:63:dc:4e:
                    fe:86:5e:0a:f8:d1:45:53:6b:ec:ee:ed:3b:30:4f:
                    d5:21:1b:33:56:47:36:05:02:d7:61:bf:03:db:99:
                    66:2b:70:88:fe:fd:38:bd:4f:16:e1:ec:3f:26:4a:
                    7b:91:05:60:43:17:13:b6:e9:3b:7d:2a:76:ee:89:
                    c2:bb:64:f5:f1:f9:e5:ca:7d:34:58:7b:43:af:2c:
                    d9:fa:cd:92:89:34:01:83:8b:12:55:27:20:29:76:
                    7d:77:1f:cb:f3:ce:72:86:60:7e:1d:4f:0f:66:cd:
                    d8:95:a2:d8:7b:68:33:bc:84:7b:ee:a8:6b:4a:20:
                    d1:13:4b:b7:91:d0:01:04:88:b4:d3:cb:79:08:6e:
                    27:be:ca:1d:60:a0:74:4b:fb:78:9d:0b:59:d5:e2:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:BE:B8:46:D5:ED:14:B6:06:A8:57:4D:60:9D:76:43:11:A8:C5
            X509v3 Authority Key Identifier:
                keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d250::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:d9:db:a1:0b:a8:22:56:3b:a8:32:9f:e9:32:4d:94:1e:66:
         cf:07:ca:63:d5:08:b6:56:01:38:80:e0:d2:0b:10:06:2c:49:
         3b:28:52:22:7a:55:65:f3:c3:52:41:07:cb:ba:09:e0:83:db:
         4d:29:8d:ca:33:a9:3a:fb:c7:49:ce:b0:a0:9e:91:29:77:a2:
         98:7a:15:0d:87:1c:34:5a:58:13:e5:ef:d5:20:cf:82:35:1b:
         69:d1:70:26:89:01:66:d8:ab:19:78:ea:f8:5a:22:c0:1b:1c:
         d0:36:ed:ba:f3:e0:4e:96:1f:91:e0:83:ca:50:d7:88:27:5f:
         4f:36:46:6c:f1:f4:85:1c:78:23:f3:c1:c0:d6:25:54:54:15:
         0f:2b:c9:cd:1b:aa:f0:07:71:e1:5e:b9:10:89:1b:58:5c:67:
         de:62:01:72:85:34:4e:be:2e:28:71:96:c7:7d:3c:30:18:65:
         38:f0:3f:4a:03:25:c6:5f:9c:06:36:b6:16:82:66:9f:ee:b3:
         fa:02:5d:f3:ad:18:ca:d1:e9:c1:98:43:35:cb:43:4d:d1:ae:
         64:fa:47:f2:32:8a:73:81:55:11:40:90:98:99:a7:d4:1b:a0:
         70:ea:15:58:7c:d9:7d:bc:24:13:be:2f:a8:ac:9e:ca:52:38:
         c2:7f:76:6c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUf00I90YVf1PnZNoQGT87nbInCXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD
NzUwRENCRDAeFw0yNTAyMjYyMDEwMDBaFw0yNjAyMjUyMDE1MDBaMDMxMTAvBgNV
BAMTKEYzNTFCRUI4NDZENUVEMTRCNjA2QTg1NzRENjA5RDc2NDMxMUE4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCanPHahv7JZGArkE4nJfpELawK
FxE3RvJumrNql2ldFxgbndCzBpj9jdpxuIDEYVh+I+SPM8BTTVV/4cE8lHqXTYn/
siuRVFKGNYtksUJOGztfu4tbGXHoZxdluHZ7tiC6Vw7Fh2PcTv6GXgr40UVTa+zu
7TswT9UhGzNWRzYFAtdhvwPbmWYrcIj+/Ti9Txbh7D8mSnuRBWBDFxO26Tt9Knbu
icK7ZPXx+eXKfTRYe0OvLNn6zZKJNAGDixJVJyApdn13H8vzznKGYH4dTw9mzdiV
oth7aDO8hHvuqGtKINETS7eR0AEEiLTTy3kIbie+yh1goHRL+3idC1nV4oKrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU81G+uEbV7RS2BqhXTWCddkMRqMUwHwYDVR0j
BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF
RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD
RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG
NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy
NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wLzMyMzgzMDMzM2E2NDMyMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0lAw
DQYJKoZIhvcNAQELBQADggEBANnZ26ELqCJWO6gyn+kyTZQeZs8HymPVCLZWATiA
4NILEAYsSTsoUiJ6VWXzw1JBB8u6CeCD200pjcozqTr7x0nOsKCekSl3oph6FQ2H
HDRaWBPl79Ugz4I1G2nRcCaJAWbYqxl46vhaIsAbHNA27brz4E6WH5Hgg8pQ14gn
X082Rmzx9IUceCPzwcDWJVRUFQ8ryc0bqvAHceFeuRCJG1hcZ95iAXKFNE6+Lihx
lsd9PDAYZTjwP0oDJcZfnAY2thaCZp/us/oCXfOtGMrR6cGYQzXLQ03RrmT6R/Iy
inOBVRFAkJiZp9QboHDqFVh82X28JBO+L6isnspSOMJ/dmw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:37:34 2025 by rpki-client